Legal

Privacy Policy

How DigiGrowthPilot collects, uses, protects and deletes your personal data.

Last updated: 16 October 2026

1. Introduction and scope

This Privacy Policy explains how DigiGrowthPilot ("DigiGrowthPilot", "we", "us", "our") collects, uses, stores, shares and protects personal data when you visit www.digigrowthpilot.com (the "Website"), contact us, or interact with our advertisements and social media pages, including those on Meta platforms (Facebook and Instagram).

We are a growth, digital and strategy company based in Delhi NCR, India. This Policy is written to meet the requirements of Indian law, including the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (together with the rules made under it), as they apply from time to time.

By using the Website or sending us your information, you acknowledge that you have read this Policy. If you do not agree with it, please do not use the Website.

2. Information we collect

We collect only the information needed to run the Website and respond to enquiries.

Information you give us

  • Contact form details: full name, email address, company name, phone number (optional), capability of interest, and the project details or message you write.
  • Emails, calls, WhatsApp or other messages you send us, and any information you share in them.
  • Lead information you submit through a Meta lead form (for example, on a Facebook or Instagram ad), which may include your name, email address, phone number, city and answers to any questions in the form.

Information collected automatically

  • Technical data such as your IP address, browser type and version, device type, operating system, referring page and the pages and times you visit. This is generated in standard server and hosting logs when you load the Website.
  • Approximate location derived from your IP address.

What we do not collect

We do not knowingly collect sensitive personal data such as financial account details, passwords, health records or government identifiers through the Website, and we ask you not to send them to us. We do not run user accounts or process online payments on the Website.

3. How we use your information and our legal basis

We use personal data only for specific, lawful purposes:

  • To respond to your enquiry, prepare proposals and deliver services you ask for (performance of a contract or steps you request).
  • To communicate with you about our services, scheduling and follow-ups, based on your consent or a legitimate use relating to your enquiry.
  • To keep the Website secure, prevent spam and abuse, and fix technical problems.
  • To understand how the Website is used and improve it, in aggregate form where possible.
  • To follow up on leads you submitted through our Meta advertisements.
  • To comply with legal obligations and to establish, exercise or defend legal claims.

Where Indian law requires consent, we rely on your free, specific, informed and unambiguous consent, which you give by submitting a form or contacting us. You may withdraw consent at any time as described in Section 10. We do not sell your personal data.

4. Cookies and similar technologies

At the date of this Policy, the Website does not use advertising, analytics or tracking cookies, and does not install tracking pixels. Our hosting provider and the Website itself may use strictly necessary technical storage to deliver pages and keep the Website working.

If we later add analytics or advertising tools (for example Google Analytics or the Meta Pixel), we will update this Policy, describe the cookies they set, and ask for your consent through a cookie notice before any non-essential cookie is placed.

You can control or delete cookies through your browser settings. Blocking essential storage may affect how parts of the Website work.

5. Third-party services and sharing

We share personal data only with service providers who help us operate the Website and respond to you, and only as needed for those purposes:

  • Netlify, Inc.: hosts the Website and receives contact form submissions through Netlify Forms, including spam filtering. Netlify processes server logs and form data on our behalf, which may be stored outside India.
  • Google Fonts: the Website loads its fonts from Google, so your IP address and browser details are sent to Google when a page loads.
  • Email, calendar and communication tools we use to reply to you and manage enquiries.
  • Professional advisers and authorities where required by law, court order or to protect our rights.
  • Delivery partners: for certain engagements we work with a specialist technology and delivery network (see our Technology page). We share client or lead data with them only where needed to deliver the work you have asked for, under confidentiality obligations.

We may also disclose data in connection with a merger, acquisition or sale of our business, in which case the recipient will be bound to protect it on terms consistent with this Policy.

Links on the Website to other sites, including our LinkedIn, Instagram and X pages, are governed by those sites' own privacy policies. We are not responsible for their practices.

6. Meta (Facebook and Instagram) advertising and integrations

We advertise on Meta platforms, including Facebook and Instagram, and we manage business pages and ad accounts on them. Meta Platforms Ireland Limited and Meta Platforms, Inc. act as independent controllers of the data they collect when you use their services. Their handling of your data is governed by the Meta Privacy Policy, and you can manage your ad preferences in your Meta account settings.

  • When you click one of our ads, Meta may tell us aggregate information about ad performance. We do not receive your Meta profile unless you choose to share it with us.
  • If you submit a Meta lead form, the details you enter are provided to us through Meta's lead tools. We use them only to contact you about your enquiry and to deliver our services, as set out in this Policy.
  • If you message us on Facebook, Instagram or WhatsApp, the conversation is processed by Meta and is visible to us. Please avoid sending sensitive information in these messages.
  • The Website does not currently install the Meta Pixel or use the Conversions API. If we enable them, we will update this Policy and request consent first. They would allow us to measure ad results, show relevant ads and build audiences of people who have interacted with our Website or ads, using hashed identifiers such as email address or phone number.
  • We do not use data obtained from Meta for any purpose other than the ones described here, and we do not sell it or use it to discriminate against anyone.

You can request deletion of data we received through Meta platforms by following the steps in Section 11. You can also remove our access to information you shared with an app or business from your Facebook or Instagram settings.

7. Data retention

We keep personal data only as long as needed for the purposes in this Policy:

  • Enquiries and contact form submissions: for up to 24 months after our last communication with you, or for the duration of any client engagement and a reasonable period afterwards.
  • Client records and invoices: as long as required by Indian tax, accounting and company law (generally up to 8 years).
  • Server and security logs: typically for a short rolling period set by our hosting provider.
  • Marketing lead data from Meta forms: up to 12 months unless you become a client or ask us to delete it sooner.

When data is no longer needed, we delete it or anonymise it so it can no longer identify you, unless a law requires us to keep it longer.

8. Security

We use reasonable security practices appropriate to the data we hold, including encrypted (HTTPS) connections, access controls and the use of reputable hosting providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a personal data breach affects you, we will notify you and the relevant authority as required by law.

9. International transfers

Some of our providers, including our hosting and form-handling provider, may process data on servers outside India. We transfer data only to the extent permitted by Indian law and take reasonable steps to ensure it is protected. We work with clients in India and other markets, so enquiries from outside India may also be processed in India.

10. Your rights and how to exercise them

Subject to applicable law, you have the right to:

  • Access a summary of the personal data we hold about you and how it is processed.
  • Correct inaccurate or incomplete personal data, or update it.
  • Request erasure of personal data we no longer need to keep.
  • Withdraw your consent at any time. This does not affect processing done before withdrawal.
  • Nominate another person to exercise your rights if you die or become incapacitated.
  • Have your grievance heard and resolved by us (see Section 13), and approach the Data Protection Board of India if you are not satisfied.

To exercise any right, email us at AmanBindra@DigiGrowthPilot.com from the address you used with us, stating what you want us to do. We may ask you to verify your identity before acting. We will respond within a reasonable time and, in any case, within the period required by law.

11. Data deletion request instructions

You can ask us to delete your personal data, including any data we received through our website, a Meta lead form, or messages on Facebook, Instagram or WhatsApp. To do so:

  1. Send an email to AmanBindra@DigiGrowthPilot.com with the subject line "Data deletion request".
  2. Include your full name and the email address or phone number you used when contacting us. If the data came from a Meta lead form, please also mention the ad or Facebook or Instagram page you used.
  3. We will confirm that we have received your request and may ask you to verify your identity.
  4. We will delete or anonymise your personal data from our systems within 30 days of verifying your request, and let you know when it is done.

We may keep limited information where the law requires it (for example invoices and tax records) or where it is needed to handle a legal claim. We will tell you if this applies. Data held by Meta, Netlify or other independent providers must be deleted through them as well. Meta users can manage or delete data in their account settings.

12. Children's data

The Website and our services are intended for businesses and adults. We do not knowingly collect personal data of anyone under 18 years of age. If you believe a child has given us personal data, contact us and we will delete it promptly.

13. Grievance officer and contact

If you have a question, concern or complaint about this Policy or how we handle your data, contact our Privacy and Grievance Officer. We will acknowledge your complaint and aim to resolve it within 15 days.

Business
DigiGrowthPilot
Officer
Privacy & Grievance Officer
Location
Delhi NCR, India

14. Changes to this Policy

We may update this Policy when our practices, tools or the law change. The "Last updated" date at the top shows the latest version. If we make a material change, we will post a notice on the Website and, where required, seek your consent again.